istio 安装

helm安装

[root@vm01 ~]# tar xvf helm-v2.14.1-linux-amd64.tar.gz 
linux-amd64/
linux-amd64/LICENSE
linux-amd64/helm
linux-amd64/README.md
linux-amd64/tiller
[root@vm01 ~]# chmod +x linux-amd64/helm 
[root@vm01 ~]# mv linux-amd64/helm /usr/local/bin
[root@vm01 ~]# helm version
Client: &version.Version{SemVer:"v2.14.1", GitCommit:"5270352a09c7e8b6e8c9593002a73535276507c0", GitTreeState:"clean"}
Error: could not find tiller

helm template安装

简单安装

kubectl create namespace istio-system
helm template install/kubernetes/helm/istio-init --name istio-init --namespace istio-system | kubectl apply -f -
# 查询crd创建数，应用53
kubectl get crds | grep 'istio.io\|certmanager.k8s.io' | wc -l
helm template install/kubernetes/helm/istio --name istio --namespace istio-system | kubectl apply -f -

带kiali的安装

kubectl create namespace istio-system
helm template install/kubernetes/helm/istio-init --name istio-init --namespace istio-system | kubectl apply -f -

KIALI_USERNAME=$(echo -n 'admin' | base64)
KIALI_PASSPHRASE=$(echo -n '111111' | base64)
kubectl create namespace istio-system
cat < istio.yaml
# 安装istio
kubectl apply -f istio.yaml

# 删除安装
helm template install/kubernetes/helm/istio --name istio --namespace istio-system | kubectl delete -f -
kubectl delete namespace istio-system

可以用下面的 Helm 参数启用遥测插件：

Grafana：--set grafana.enabled=true
Kiali：--set kiali.enabled=true
Prometheus：--set prometheus.enabled=true
Tracing：--set tracing.enabled=true

helm tiller安装istio

kubectl apply -f install/kubernetes/helm/helm-service-account.yaml
helm init --service-account tiller -i registry.aliyuncs.com/google_containers/tiller:v2.14.1 --stable-repo-url https://kubernetes.oss.aliyuncs.com/charts
helm install install/kubernetes/helm/istio-init --name istio-init --namespace istio-system

# 需要等crd创建完成
kubectl get po -n istio-system

NAME                      READY   STATUS      RESTARTS   AGE
istio-init-crd-10-57sj4   0/1     Completed   0          49s
istio-init-crd-11-xbhgr   0/1     Completed   0          49s

helm install install/kubernetes/helm/istio --name istio --namespace istio-system
# 查看istio启动状态
kubectl get svc -n istio-system
kubectl get pods -n istio-system

# 清理安装
helm delete --purge istio
helm delete --purge istio-init
kubectl delete -f install/kubernetes/helm/istio-init/files

查看安装后的pod

[root@vm01 istio-1.1.1]# kubectl get po -n istio-system
NAME                                      READY   STATUS      RESTARTS   AGE
grafana-76d7cd578b-mr97h                  1/1     Running     0          2m28s
istio-citadel-6b6df7d778-7svdg            1/1     Running     0          2m27s
istio-cleanup-secrets-1.1.1-s75nc         0/1     Completed   0          2m28s
istio-galley-99dd69cfb-8lgln              1/1     Running     0          2m28s
istio-grafana-post-install-1.1.1-s2mf5    0/1     Completed   0          2m28s
istio-ingressgateway-7d5dc9f886-mvvpn     1/1     Running     0          2m28s
istio-init-crd-10-xq8bj                   0/1     Completed   0          4m43s
istio-init-crd-11-5kd54                   0/1     Completed   0          4m43s
istio-pilot-6c76ccd8bd-7j58q              2/2     Running     0          2m27s
istio-policy-78799b7b69-zgztg             2/2     Running     2          2m27s
istio-security-post-install-1.1.1-4279s   0/1     Completed   0          2m28s
istio-sidecar-injector-bdf467795-kjj4r    1/1     Running     0          2m27s
istio-telemetry-745588c775-84mvf          2/2     Running     4          2m27s
istio-tracing-7858d85859-brplq            1/1     Running     0          2m27s
kiali-7f84b859d7-mk69h                    1/1     Running     0          2m28s
prometheus-6495f4b57d-f5b7v               1/1     Running     0          2m27s

快速安装

安装

for i in install/kubernetes/helm/istio-init/files/crd*yaml; do kubectl apply -f $i; done

# 宽容模式
kubectl apply -f install/kubernetes/istio-demo.yaml
# 严格模式
kubectl apply -f install/kubernetes/istio-demo-auth.yaml

删除

kubectl delete -f install/kubernetes/istio-demo.yaml
kubectl delete -f install/kubernetes/istio-demo-auth.yaml
for i in install/kubernetes/helm/istio-init/files/crd*yaml; do kubectl delete -f $i; done